Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
File: r4TKySqfMTSUgaaOlRvFWvUI8uY.cer (raw, json)
Hash identifier: /NfEt0x7Yk96Lf8GreWaeArIPG1VjqAC/6oddRyUpQU=
Subject key identifier: AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D1B3888833E2FE999162F9B04D6D04DE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 23 Mar 2026 15:03:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199958
IP: 45.81.36.0/24
IP: 93.123.16.0/24
IP: 93.123.22.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:38:88:83:3e:2f:e9:99:16:2f:9b:04:d6:d0:4d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 23 15:03:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af84cac92a9f31349481a68e951bc55af508f2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:2a:a9:2e:54:ec:f6:e5:e6:6c:4e:66:cc:
5b:3f:bf:d9:9f:d1:2d:60:84:0e:d2:92:34:14:88:
66:61:7c:19:a4:54:63:cf:c5:97:20:14:b0:ac:6f:
65:5d:b4:d6:de:be:fc:dc:50:2d:cf:c0:28:6a:ae:
83:7b:1e:ed:d6:9a:fb:68:06:08:1a:24:80:1d:9d:
be:a3:ce:f3:ac:d7:f6:f3:36:bb:5f:a3:53:6e:df:
25:5c:7f:16:60:f4:c5:20:69:1d:41:77:9f:31:11:
70:08:83:81:97:1a:55:42:5e:97:1e:68:57:1f:59:
64:5b:9c:77:5f:e1:93:f2:e2:b7:ec:3c:37:c7:28:
34:71:19:9f:cd:64:ec:f0:13:3f:db:a2:29:fe:34:
b4:fc:74:c3:42:07:82:c6:7e:08:0c:01:6e:c8:00:
09:39:91:ba:e4:33:cb:23:67:01:e3:06:53:80:a7:
63:6b:9b:3b:c5:c2:dd:a6:ac:1b:d1:8d:38:8a:d9:
71:70:4b:a2:80:97:88:f8:75:ea:01:b2:36:d4:9f:
57:6e:86:3a:10:0c:e4:2e:9a:10:5a:93:df:3d:05:
b6:d7:10:32:e5:ea:dd:ca:0e:e2:c9:56:f3:01:92:
fd:46:48:e9:45:e2:0a:1b:8b:ea:09:bc:5f:e2:8a:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.36.0/24
93.123.16.0/24
93.123.22.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199958
Signature Algorithm: sha256WithRSAEncryption
a4:f4:3e:d2:2b:ce:72:4a:ce:a4:45:c1:0d:9d:09:f5:aa:fb:
81:1a:3e:34:71:89:ca:1d:a1:50:4a:6c:48:4b:14:95:44:ac:
2c:50:bb:8f:c3:26:f9:ef:ed:e8:39:2c:55:60:46:75:45:3b:
23:e9:a4:48:76:5c:c2:e3:3f:bc:7c:03:b9:bc:f7:5d:61:a4:
b1:9b:c0:23:f2:dc:e4:1e:49:97:0f:ab:d4:00:46:be:ef:81:
1d:4a:aa:c2:af:be:d7:47:2c:9c:2c:4d:e1:c2:fe:01:d4:f3:
8d:e7:7c:e0:90:fe:62:72:b0:1e:91:61:a9:15:17:49:47:f3:
3b:37:5b:71:ce:68:c2:ff:df:dc:d2:77:78:ef:fa:58:39:35:
03:95:30:09:19:b3:34:f9:15:f5:0d:81:7f:98:78:0c:07:aa:
a5:81:0a:37:33:fc:4d:8d:9b:d5:c6:4e:4c:9a:6f:8c:33:f9:
a4:a3:7a:30:47:62:77:87:9f:9a:12:ee:21:5d:f7:b2:79:3e:
5e:c1:45:85:76:c6:37:b3:67:13:37:a3:1a:fe:52:aa:a2:b7:
74:cf:84:72:a2:f8:08:37:14:50:a4:a1:d3:ce:00:18:b8:fd:
94:d9:ad:ec:94:07:93:36:0c:15:0a:b1:fa:5b:13:f6:e7:1a:
63:55:10:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:45:14 2026 by rpki-client